Access is denied due to a client certificate error

Article Number:040352

When you try to access a URL that requires Client Certificate Authentication (https://subdomain name.s.cybozu.cn/), you may see the error message "A valid client certificate is required to access this site. Code: 496 No Cert" and be unable to access the URL.

Screenshot: The "A valid client certificate is required" message is displayed

To use Client Certificate Authentication, you must have a client certificate installed in your web browser.
Check that a client certificate is installed, and then try to access the URL again.
As an example, the steps on this page describe how to check that a client certificate is installed (and how to install a client certificate, if necessary) when using Google Chrome on Windows.

1. Steps to check if a client certificate is installed

Follow the steps below to check whether a client certificate for Client Certificate Authentication has been installed in your web browser or on your mobile device.

  1. Start Google Chrome.

  2. Click the menu icon at the top right of Google Chrome. Screenshot: Google Chrome. The menu icon is outlined in red.

  3. Click Settings.

  4. Click Security under Privacy and security. Screenshot: Google Chrome. "Security" is outlined in red.

  5. Click Manage certificates.

  6. Click the Personal tab. Screenshot: Google Chrome. "Personal" is outlined in red.

  7. Check if a client certificate is installed.
    If you find "cybozu.com client certificate" under Friendly Name, it means you have a client certificate installed.

    If a client certificate is installed, proceed to If a client certificate is installed.
    If a client certificate is not installed, proceed to If a client certificate is not installed.

2. Steps to be taken after checking if a client certificate is installed

If a client certificate is installed

  1. Restart Google Chrome.

  2. Use Incognito mode to access the URL that requires Client Certificate Authentication ((https://subdomain name.s.cybozu.cn/).
    For details, refer to the following page.
    Google Chrome Help: Browse in Incognito mode

If a client certificate is not installed

If a client certificate is not installed, the steps to take depend on whether you can log in to kintone from either another device or a web browser.

If you cannot log in to kintone from another device or a web browser

Contact a cybozu.cn Administrator for assistance.

If you can log in to kintone from another device or a web browser

Follow the steps below to install a client certificate.

  1. Click the Open the Account Settings icon (the down arrow at the top right of kintone), then click Account Settings. Screenshot: "Account Settings"

  2. Click Mobile Access and write down the password displayed in the Client Certificate section.

  3. Expand Access via Web Browser and enter your e-mail address with which you want to receive a client certificate.   Screenshot: The "Mobile Access" tab

  4. From the device you want to use, double-click the client certificate that you received ("***.pfx").
    The Certificate Import Wizard will be launched.

  5. Select "Current User" as the store location, then click Next. Screenshot: Certificate Import Wizard

  6. Confirm that the client certificate is displayed in the "File name:" field, then click Next.

  7. Enter the password for the client certificate, select Include all extended properties in the Import Options section, and then click Next. Screenshot: Client certificate installation screen

  8. Select Automatically select the certificate store based on the type of certificate and click Next. Screenshot: Certificate Import Wizard

  9. Click Finish.
    Screenshot: Certificate Import Wizard

  10. Click OK.